Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Help with polall1l.exe virus removal

MjC

Posted 25 January 2005 - 09:22 PM

MjC

New Member

Member

4 posts

I have polall1l.exe embedded in C:\documents and settings\owner\local settings\temp\THEI1e4\localnrd.cab on my computer. I erased my temporary files, ran Norton Anti-Virus and have System Restore turned off. Is there any help I can get from you guys.

ilago

Posted 26 January 2005 - 07:47 AM

ilago

Visiting Staff

Visiting Consultant

363 posts

Hi MjC

Please disable Spybot's Teatimer as per the details on this site http://russelltexas....re/teatimer.htm It can interfere with some removals. You can restart it and System Restore when your system is cleaned up.

You might like to print these instructions out or copy and paste them into Notepad as you will have to close this window to complete the fixes.

Open the HijackThis Scan Screen. Click on Scan. When the scan is complete check all the following items. Then disconnect from the internet and close all open windows including this browser window and all instant messaging - Yahoo messenger, MSN messenger, ICQ and anything else that is not essential and click on Fix checked.

Reboot into Safe Mode by tapping F8 as soon as your computer starts to boot up - after the beep.Choose Safe Mode - You don't need networking.

To show hidden and system files - Open Windows Explorer and go to > Tools> Folder Options> View, select:*Show hidden files and folders*Display the contents of system foldersUncheck:*Hide protected operating system filesSet search options Next go to Search > All files and folders > More advanced options and click.

Be sure the first three boxes are selected:*Search System folders*Search Hidden Files and folders*Search SubFoldersDelete all the files and folders noted in bold below. Some may not be there but use the search function in Windows Explorer to make sure.

File and Folder Deletions

Delete this file.

PowerReg Scheduler.exe you will need to search for this one as there can be several copies of it in different. Use powerreg scheduler*.exe in the name of file box and select to search in all drives or My Computer in the dropdown box. Delete every instance of the file that Windows finds.

Give some thought to removing Shareaza from your computer - P2P can be a source of huge amounts of spyware and virus type infections.

You need to clean out the contents of your temp and temporary internet folders and all the sub-folders. You don't need to remove the sub-folders just all the files in them. There should be no programs running from temp or temporary internet folders.

ilago

Posted 27 January 2005 - 02:09 AM

ilago

Visiting Staff

Visiting Consultant

363 posts

That log looks much better - you can re-enable System Restore. That will give you a restore point that is clean. You can also re-enable Spybot Tea-timer. Make sure that Norton's is working properly by doing a Live Update and running a scan.

Keep Windows and Internet Explorer fully up to date - use automatic updates if possible.

You already have an alternate browser. Use internet explorer only for sites that require it. I already mentioned P2P software .

Don't click on OK or yes on any advert on a webpage or in spam email. Before downloading any free software - check that it doesn't use spyware as 'marketing' or to keep it free. Google is your friend or ask somewhere like here

Keep your antivirus program up to date and do regular scans.Keep your firewall up to date and read alerts before clicking Yes.

Keep Adaware up to date and do regular scansKeep Spybot Search and Destroy up to date and do regular scans

Spybot Tea-timer is also designed to do this and you already have that installed. You only need one real time monitor so have a look at the others if you like, but only install and use one.

IE-SPYAD puts over 4000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all. The download is quite a long way down the page - but the page is worth reading for more information about spyware. You need to update it regularly as well. This also doesn't affect operation.https://netfiles.uiu...ww/resource.htm

Spyware moves very fast and adapts to prevention methods very quickly so keep all prevention up to date